CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
puttyputty
𝑥
< 0.73
opensuseleap
15.0
opensuseleap
15.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
putty
bullseye
0.74-1+deb11u2
fixed
buster
not-affected
stretch
not-affected
jessie
not-affected
bullseye (security)
0.74-1+deb11u1
fixed
bookworm
0.78-2+deb12u2
fixed
bookworm (security)
0.78-2+deb12u1
fixed
sid
0.81-3
fixed
trixie
0.81-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
putty
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
ignored
disco
ignored
bionic
needs-triage
xenial
needs-triage
trusty
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html
https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
https://security.netapp.com/advisory/ntap-20191127-0003/
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html
https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
https://security.netapp.com/advisory/ntap-20191127-0003/